Multi-Factor Authentication Enabled for All Online Accounts

Protect your Invest529 account with multi-factor authentication

Protecting your online account is of the utmost importance. That’s why Commonwealth Savers, formerly Virginia29, and Invest529 has boosted its layered security approach and enabled multi-factor authentication for all customers.

What is this feature?

While multi-factor authentication has been an optional feature for all Invest529 accounts, it is now required for all customers. Multi-factor authentication uses another way to verify your identity beyond simply providing a password.

How does it work?

Enter your Login ID and password

Send a one-time code to your phone

Enter the code to complete sign in

Multi-factor authentication FAQs

: First, ask yourself who else has access to your account and if they may be trying to sign into the account. This could include your personal finance software or data aggregators (e.g., Yodlee, Mint, Plaid) attempting to access your account. However, if you are concerned that your account may be compromised, consider changing or strengthening your password. Next, immediately contact Virginia529’s Customer Service team at 1-888-567-0540 to explain that there was an unauthorized attempt to access your account.

If you are utilizing a tool that aggregates data from multiple accounts, please note that enabling multi-factor authentication may prevent these programs from accessing your account.

Related: Link Your Personal Finance Software to Your Virginia529 Account
: Sign into your account with your username and password as usual; you don’t need to create a new web login ID. After you’ve entered your username and password, you will be asked to “verify” that it’s you by sending a verification code to yourself. Once you’ve entered the code, you’ll be logged into your account.
: If you didn’t receive the code, you may try to generate a new one or contact Virginia529.
: If you don’t recognize the phone number being used, please contact Virginia529 for assistance.
: No. You do not need a smartphone to use multi-factor authentication; a landline, or a basic cell phone number that can receive text messages, will work. If you are unable to receive text messages, you can choose to receive your verification code via an automated phone call rather than a text message.
: Virginia529 customers can receive a Text/SMS message or a phone call. Message and data rates may apply for Text/SMS messages depending on your cellular plan. Also, customers can add an authenticator app as another method.
: You cannot turn off or disable multi-factor authentication. Virginia529 has made multi-factor authentication required each time you sign into your account as an added security enhancement.
: Your aggregator service may no longer be working because you have not created a Virginia529 third-party access account. To create your Virginia529 third-party account:

Sign into your account.

Select Manage My Accounts.

Select Link Personal Finance Software.

You will select an account nickname, login ID and password for the account that is different from that of your primary Virginia529 account. You will also be prompted to create an expiration date for the Virginia529 third-party access account.

Once created, this new Virginia529 third-party access account will allow you to continue to utilize your aggregator service.
: Multi-factor authentication is automatically enabled for Virginia529 customers. To update your security settings, such as a phone number or adding an authenticator app, sign into your account and select Account Security under the My Profile tab.
: Yes, a new code will be sent to you every time you sign in.
: If you previously enrolled in multi-factor authentication and were using a phone number or authenticator application, those verification methods were carried over. However, if you used email as a verification method, that option is no longer allowed. Email verification was removed and defaulted to phone verification.
: While you cannot unenroll from the phone method, you can add a second authentication method (such as an authenticator application) for flexibility when signing into your Virginia529 account.
: If you use personal finance software or account aggregation programs like Mint, multi-factor authentication disrupts aggregator access to your Virginia529 account. This happens because aggregators will not be able to use your existing login credentials to access the account as they have no way of receiving your multi-factor authentication code.

Another option is to use Virginia529’s third-party account access platform. This allows your chosen preferred personal finance software to access your Virginia529 account without having to disclose your personal login information The third-party account access platform only gives access to basic account and investment details without displaying personal and sensitive information. This will allow you to track your Virginia529 account(s) using third-party financial apps without compromising your account security.

Learn More: Link Your Personal Finance Software to Your Virginia529 Account

Need to report suspicious or fraudulent activity?

Timely action is important—contact Invest529 immediately.

Report now

Additional Information

Online Account Access

View account information or make a transaction

Frequently Asked Questions

Find answers to the most common questions about 529 plans

Browse FAQs

Privacy & Security

Find out more about the security tools that are available to protect your savings

Safeguard your account